CVE-2019-18994: ABB PB610 HMIStudio crashes after launching an empty *.JPR application file
Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty .JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18994?
CVE-2019-18994 is classified as a high severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2019-18994?
To mitigate CVE-2019-18994, ensure you are using ABB PB610 Panel Builder 600 version 2.8.0.425 or later.
What causes CVE-2019-18994?
CVE-2019-18994 is caused by a lack of file length check, which leads to application crashes when an empty *.JPR application file is loaded.
Who is affected by CVE-2019-18994?
CVE-2019-18994 affects users of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier.
What are the potential consequences of CVE-2019-18994?
The potential consequences of CVE-2019-18994 include application malfunction and crashes when attempting to load certain files.